Allowlist CVE-2020-28928 as its resolved in musl 1.2.2 and being flagged

myoung34 · Apr 4, 2021 · 4b6f5ff · 4b6f5ff
1 parent 4e644d5
commit 4b6f5ff
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/.claire.yml b/.claire.yml
@@ -0,0 +1,3 @@
+generalwhitelist:
+  # musl 1.2.2 resolves -> A buffer overflow (CVE-2020-28928) in wcsnrtombs has been fixed with the function essentially rewritten
+  CVE-2020-28928: musl
diff --git a/.dockerignore b/.dockerignore
@@ -4,3 +4,4 @@ Dockerfile
 Makefile
 .git
 LICENSE
+.claire.yml
diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Build
         run: docker build -t myoung34/tilty:latest .
       - name: Test
-        run: ./clair-scanner --ip $(ip -f inet addr show eth0 | grep -Po 'inet \K[\d.]+') myoung34/tilty:latest
+        run: ./clair-scanner -w .claire.yml --ip $(ip -f inet addr show eth0 | grep -Po 'inet \K[\d.]+') myoung34/tilty:latest
   bandit:
     runs-on: ubuntu-latest
     strategy: